8 matches found
CVE-2023-40546
...
shim: Out-of-bounds read printing error messages
A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...
EulerOS Virtualization 3.0.2.6 : gdk-pixbuf2 (EulerOS-SA-2023-1084)
According to the versions of the gdk-pixbuf2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereferen...
EulerOS 2.0 SP3 : gdk-pixbuf2 (EulerOS-SA-2022-1721)
According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service NULL pointer dereference and...
zsh security update
4.3.11-11 - improve printing of error messages introduced by the fix of CVE-2019-20044 4.3.11-10 - drop privileges securely when unsetting PRIVILEGED option CVE-2019-20044...
DEBIAN-CVE-2018-10105
tcpdump before 4.9.3 mishandles the printing of SMB data issue 2 of 2...
USN-3418-1: GDK-PixBuf vulnerabilities
It was discovered that the GDK-PixBuf library did not properly handle certain jpeg images. If an user or automated system were tricked into opening a specially crafted jpeg file, a remote attacker could use this flaw to cause GDK-PixBuf to crash, resulting in a denial of service, or possibly...
The vulnerability of the iOS operating system allows a perpetrator to gain access to traffic exchange.
The vulnerability of the DataAccess component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to the traffic exchange by exploiting an error in the email address printing...